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Introduction 

In this note we shall show that there exist supersingular curves for every positive genus in 
characteristic 2. Recall that an irreducible smooth algebraic curve C over an algebraically 
closed field F of characteristic p > is called supersingular if its jacobian is isogenous to 
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a product of supersingular elliptic curves. An elliptic curve is called supersingular if it 
does not have points of order p over F. It is not clear a priori that there exist such curves 
for every genus. Indeed, note that in the moduli space A g <S> ¥ p of principally polarized 
abelian varieties the locus of supersingular abelian varieties has dimension [<? 2 /4] (cf. [0, 
L-O]), while the locus of jacobians has dimension 3g — 3 for g > 1. Therefore, as far as 
. dimensions are concerned there is no reason why these loci should intersect for g > 9. 

In this paper we construct for every integer g > a supersingular curve of genus g over 
the field F2. In particular this shows that for every g > there exists an irreducible curve 
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of genus g whose jacobian is isogenous to a product of elliptic curves. We refer to [E-S] 
for related questions in characteristic 0. We do our construction by taking a suitable fibre 
product of Artin-Schreier curves. This construction is inspired by coding theory, where the 
introduction of generalized Hamming weights led us to consider such products, cf. [G-V 

2]- 

More generally, we are able to construct in characteristic p a supersingular curve over 
F p of any genus g whose p-adic expansion consists of the digits and (p — l)/2 only. We 
Ctf . can also count on how many moduli the construction depends. 

' §1 Fibre products of Artin-Schreier curves. 

Let F be a fixed algebraic closure of the prime field F2. We consider a finite dimensional F2- 
linear subspace C of the function field ¥(x). Define the operator p onF(i) by p(f) = f 2 +f- 
We shall assume that C H p(¥(x)) = {0}. 

To an element / G C — {0} we associate the complete non-singular Artin-Schreier 
curve Cf with affine equation 

y 2 + y = f- 

Choose a basis fi, . . . , of £ and let fa : Cf i — > P 1 be the morphism given by the inclusion 
¥(x) C ¥(x,y). Then we define a curve C c by 

C c = Normalization of (Cf 1 x . . . x Cf k ), 

where the product means the fibre product taken with respect to the morphisms fa. Up 
to F(x)-isomorphism the curve C c is independent of the chosen basis of C. 
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In the following we need some properties of the curve C £ ; the reader can find a proof 
in [G-V 2]. 

(1.1) Proposition, i) The jacobian ofC c decomposes up to isogeny as 

Jac(C £ ) ~ Yl Jac(C/) 
fec-{0} 

and therefore the genus g{C c ) can be expressed as 

9(C C )= £ g(C f ) 
fec-{0} 

in terms of the genera of the C / . 

(1.2) Corollary. Suppose that for all f G C — {0} the curve Cf is supersingular or 
rational. Then the fibre product C c is supersingular or rational. 

As ingredients for our fibre product we shall use special Artin-Schreier curves. We consider 
for h > 1 the vector space TZh of 2-linearized polynomials 

h 

{R = ^a l x 2% : a z G F} 

and define 

n* h = {Ren h -.a h ^ 0}. 

We proved in [G-V 1] the following result. 

(1.3) Proposition. The Artin-Schreier curve Cr with afEne equation y 2 + y = xR(x) for 
R G IZfr is a (hyperelliptic) supersingular curve of genus 2 h ~ 1 . 

§2 The Construction. 

In this section we describe how to construct a curve of a given genus in characteristic 2. 
Here the construction is done over a finite extension of the prime field. In Section 3 we 
shall show that we can find such a curve over the prime field F 2 . 

(2.1) Theorem. Let F be an algebraic closure of F 2 . For every positive genus g there 
exists a supersingular curve over F. 

Proof. Take g > and write g as a dyadic expansion in the form 

g = 2 S1 (1 + . . . + 2 ri ) + 2 S2 (1 + . . . + 2 ra ) + ... + 2 St (l + ... + 2 rt ), (1) 
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where Sj, G Z> and Sj > Sj_i + r^_i + 2 for z = 2, . . . , t. We now choose for i = 1, . . . , t 
a F 2 -linear subspace Li of F(x) contained in 1Z* U . U {0} with Ui = (si + 1) — X]j=i( r j + 1) 
and dim(Lj) = + 1. We put C = @\ =1 (xLi). It follows directly from Propositions 1 and 
2 that C c is supersingular and that since Ui + i > Ui + 1 for 1 < i < t — 1 the genus satisfies 

/e£-{o} 

= £ • 2^-=i (ri+1) (2 ri+1 - 1) 
i=i 

t 

= ^2 Sl (2 ri+1 - 1). 

i=l 

This last expression yields the expression for g in (1), hence g(C c ) = g. □ 

From the preceding proof we conclude that there exists supersingular curves of genus g > 
already over the field F 2 ™ with m = maxi<j< t (ri + 1), where the occur in the expansion 

(!)• 

Example. We construct a supersingular curve of genus 30. We write 30 = 2(l+2+2 2 + 2 3 ) 
and this tells us that t = 1, s± = 1 and T\ = 3. So our curve is defined over the finite 
field Fi 6 . We set ¥ 16 = F 2 (a) with a 4 + a + 1 = 0. Let L C K* Ul U {0} = Tl\ U {0} 
be the 4-dimensional space generated by x 4 , ax 4 , a 2 x 4 and a 3 x 4 . Then C = xL and 
is the desired supersingular curve of genus 30. Its function field T = Fi 6 (x,yo 5 Vi, 2/2, 2/3) 
with yf + Hi = a l x 5 is a Galois extension of F 16 (x) of degree 16. Consider the element 
y = Y^i=o al yi- Then for all non-trivial a E Gal(jF/F 16 (x)) we have a(y) 7^ y, hence 
JF = Fiq(x, y). We obtain 

3 

y^ +y = Y j a\yf + y l ) 

3 

= a 6 x 40 + a: 20 + a 1 V +aV. 
Thus we have found a supersingular curve of genus 30 over the field F 16 with affine equation 

y 16 + y = a V° + x 20 + a 1 V° + a V. 



§3 Equations for fibre products 

The preceding example suggests to study curves of the following type. We consider curves 
C = Cs,r defined by an equation 

S(y) = xR x {x) + {xR 2 {x)f + ... + {xR n {x)f n ~\ (2) 
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where S G F[y] is a 2-linearized polynomial £ = y 2 ™ + A n _!y 2 " 1 + . . . + A y with A ^ 
and where the i?j G F[x] for i = 1, , . . . , n are also 2-linearized polynomials (not all 0). We 
shall assume for a moment that this equation defines an irreducible curve. Consider the 
F2-vector space 

E = {a G F : S(a) = 0}. 

An element a G E acts on C via y i— > y + a. Thus the curve C is a Galois covering of 
P 1 with Galois group of type E = (Z/2Z) n . A F 2 -linear subspace E' of E of codimension 
1 defines an irreducible quotient curve C/E'. If a G E — E' then the linear subspace E' 
corresponds to a splitting of 

S = B(B + B(a)), (3) 

where B is the 2-linearized monic polynomial of degree 2 n_1 in F[y] with zero set E'. Note 
that B(a) G F* is independent of the choice of a G E — E'. If we put 

B = y 2 "" 1 + S n _ 2 y 2 "" 2 + . . . + S y, (4) 
and P = B(a) then by comparing coefficients, (3) is equivalent to the system of equations 

(3B +0 = A , 

B\_ x +(3B l = A, for i = 1, . . . , n - 2, (5) 
B 2 n _ 2 + P = A n -i. 
The compatibility of (5) comes down to the equation 

n /t2 J_1 n 

Efe=i or /r+^ry"-* 2 '- 1 '^. (6) 

j=i ^ i=i 

Observe that a = satisfies a linearized equation, namely 

a 2 + a 2 + . . . + A n _ia 2 + a = 0. (7) 
Define the F 2- vector space 

A = {a G F : a satisfies (7)}. 

The elements of A — {0} parametrize the hyperplanes of E' of E. The hyperplane corre- 
sponding to a G A — {0} will be denoted by E a . Moreover, we set 

T = xRi + {xR 2 f + ... + (xR n ) 2n ~\ 

(3.1) Lemma. Each quotient curve C a := C/E a with a G A — {0} is of the form 

w 2 + w = a 2 T, (8) 
where w = aB with B corresponding to E a . 

Proof. One checks that w is invariant under y ^ y + a with a G E a . Substitution of (3) 
in (2) yields (8). □ 
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(3.2) Corollary. The curve in (8) is ¥[x]-isomorphic to 

w 2 + w = a 2 xRi + axR,2 + a 2 xRs + . . . + a 2 ( ' ' xR n . (9) 

and therefore it is supersingular if not rational. 
Proof. Consider the F[x]-isomorphism 

n i—2 

w i— > w + 5^( a2 xRi) 23 . 

i=2 j=0 

and apply Proposition (1.3). □ 

(3.3) Proposition. If the curve C defined by (2) is irreducible then it is a fibre product 
which is supersingular if not rational. Its jacobian is up to isogeny the product of the 
jacobians of the curves given in (8) with a G A — {0}. 

Proof. Choose a F 2 -basis of A, say cki, . . . , a n . The curves C a = C/E Q are quotients of 
C, hence C admits a morphism <p : C — > C ai x . . . x C an , the fibre product of the C ai 
with respect to the (canonical) maps C Qi — > P 1 . Since the en are F2-independent, Galois 
theory and Lemma (3.1) yield that the function fields of the curves C ai x . . . x C a . and 
Ca + i are linearly disjoint for j = 1, . . . , n — 1. So the fibre product C ai x . . . x C Qri is a 
covering of degree 2 n of P . Since C is also a covering of P 1 of degree 2 n it follows that <fi is 
an isomorphism. The Proposition now follows from Proposition (1.1) and from Corollary 
(3.2). □ 

The condition that the curve C be irreducible is given in the following Lemma. 

(3.4) Lemma. The curve defined by (2) is irreducible if and only if the n-dimensional 
F 2 -vector space £ of functions a 2 T with a G A satisfies £ fl p(¥(x)) = {0}. 

Proof. The implication "=^" follows from Proposition 3.3. As to the implication "-<=" , we 
use the theory of Artin-Schreier extensions (see [B], Ch. V, §11). According to that theory 
the compositum of the function fields ¥(x,w a ) with w a = aB satisfying (8) has degree 

#(£/£np(F(x))) = 2 B 

over ¥(x). Comparison with the degree of y in (2) shows the irreducibility. □ 

(3.5) Theorem. For every integer g > there exists a supersingular curve of genus g 
over the prime field F 2 . 

Proof. We construct a supersingular curve of the form (2) with prescribed genus g > 0. 
Recall the binary expansion of g given in (1) 

g = 2 S1 (1 + . . . + 2 ri ) + 2 S2 (1 + . . . + 2 ra ) + . . . + 2 St (l + . . . + 2 rt ) 
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where Sj, Vi G Z> and Sj > Sj_i + rj_i + 2 for z = 2, . . . , t. By iw we denote the binary 
weight w = J2i=i( r i + 1) °f 9- First we determine the LHS £(?/) G F 2 [y] of (2) and the 
w-dimensional F2-vector space A. 

We start with F (x) = x and we construct inductively a sequence of F 2 -linearized 
polynomials Fi e¥ 2 [x] for i = 1, . . . , t as follows. We set 

Obviously, divides F t for z = 1, . . . , t. 

Let S{y) = F t (y) G F 2 [y]. It has degree 2™. Furthermore we define F 2 -linear spaces 

A® = {a G F : F z (a) = 0} for i = l,...,t. 

We set A = A^\ By the divisibility property of the Fj the subspaces A^ form a flag in 
A. 

Now we consider for 1 < i < t — 1 the polynomials 

Fi(a,x) = Fi(a)x 2hi+1 G F 2 [a,x], 

where the /i^ = Sj + i — w + 1 + X]j=i+i( r i + 1) f° rm a monotonically increasing sequence. 
We define for j = 0, . . . , w — 1 polynomials xR w _j(x) G F 2 [x] with -R„,_j 2-linearized by 
writing 

t-1 w-l 

^^Fi(a,x) = xR w -j{x)a 23 . 

i=l j=0 

Here xR w -j is the sum (possibly empty) of those monomials x 2hl+1 occuring in the poly- 
nomials Fi(a,x) which have the monomial a 2,3 as coefficient. 

For a G A — {0} the curves C a with equation (9) can be written as 

w 2 + w = F t - 1 (a)x 2ht+1 + ... + F (a)x 2hl+1 (10) 

/ r i ii rr> 9 r\ — (w — 2 ) cyw — 1 qiu — 2 , 

(after we have converted the coefficients a ,a, . . . ,a to a ,a ,...,«). For the 

2 u,_ ( r *+ 1 )(2 r * +1 — 1) values of a G A — A^ -1 ^ the irreducible Artin-Schreier curve C a with 
equation (10) has genus 2 s *~(™ _(r *+ 1 )) and these curves C a contribute 2 St (l + 2 + . . . + 2 r *) 
to the genus of the fibre product (2). The curves C a with a G A l ~ x — A l ~ 2 contribute 
2 s *-i (i _|_ 2 -f ... -f 2 Tt ~ 1 ) to the genus. Continuing in this way we see that the supersingular 
curve over F 2 with affine equation 

S(y) = xRt + {xR 2 f + ... + {xR w ) 2W ^ 
has the prescribed genus. □ 

Example. Take g = 221 = 1 + 2 2 (1 + 2 + 4) + 2 6 (1 + 2). We have si = 0, s 2 = 2, s 3 = 
6; ri = 0, r 2 = 2, r 3 = 1 and to = 6. We find 

F (x) = x, F t (x)=x 2 + x, F 2 (x) = x 16 + x 8 +x 2 +x, 
F 3 (x) = x M + x 32 + x 16 +x 4 + x 2 + x. 
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The space A equals {a E F : F 3 (a) = 0}. For i = 0, . . . , 2 the polynomials -Fj(ct, x) are 

F (a,x) = ax 3 , Fx(a, x) = (a 2 + a)x 5 , F 2 (a,x) = (a 16 + a 8 + a 2 + a)x 9 . 
From the identity 

2 w-1 

x) = xR w -j(x)a 2:> 

i=0 j=0 

we get 

xR & = x 9 + x 5 + x 3 , xR 5 =x 9 + x 5 : xR 3 = x 9 , xR 2 = x 9 : xRi — xR 4 = 0. 

This gives a supersingular curve of genus 221 defined by F^(y) = J2 k=1 (xRk) i-e. by 
the equation 

y 64 + y 32 + y 16 + y 4 + y 2 + y = x 288 + X 160 + X 144 + X 96 + X 80 + X 36 + X 18 . 



§4 Number of moduli 

Here we count the number of moduli for our families. In the investigation of the curves 
y 2 + y = xR(x) for R e lZ* h in [G-V 1] the polynomial 

h 

E h , R (x) = R(xf h + Y,(a l x) 2h ~ z 

of degree 2 2h played an important role. We define the radical Wr of R as the subspace of 
F formed by the elements satisfying the equation Eh,R(x) = 0. 

(4.1) Proposition. Let h > 2 and let R = J2 i=0 o-iX 21 and R' = J2 i=0 be elements 
of 1Z* h . Then the curves Cr and Cr/ are isomorphic over F if and only if there exists a 
p e F* such that a\ = aip r+1 for i = 1, . . . , h. 

Proof. Since both Cr and Cri are hyperelliptic curves an isomorphism a induces an 
isomorphism a' : P 1 — > P 1 which fixes the (unique) branch point oo and is of the form 
x i— > Xx + p with A, /j, G F, A ^ 0. Let W r (resp. Wr>) be the radical of R (resp. of R'). 
Then by [G-V 1] we have A" 1 ^ = W R >. This implies that E h , R (XX) = c x E hjR ,(X). By 

writing X 2h E h:R (X) = + uf) with U % = af ^x 2 ^ 2 ^ we see that 

\ 2h c x af _< = \ 2h + 2h -\f ~ l forz >i (n) 

and 

A 2 "c A G ¥* 2i for alH > 1 with a, ^ 0. (12) 
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Relation (12) implies A 2 c\ G F* d with d = g.c.d.{« > 1 : ai 7^ 0}. There exists an element 
77 G F* d such that we can write 

\ 2h Cx = v (^ + l)2 h -^ for • > x with fl . _^ Q ^ 

Substituting (13) in (11) we find 

o! i = (X/n) 2 for i = 1, . . . , h. 

Conversely, the relation a\ = p 2%+1 di for i = l,...,/i shows that pxR(px) = xR'(x) + 
(p 2 ao + a' )x 2 . Since for fixed R G 1Z* and varying a G F the curves Cr +cix 2 are mutually 
isomorphic over F we conclude Cr = Cr> . □ 

Remark. The conclusion of the Lemma still holds for h = 1 if we restrict to isomorphisms 
which are isomorphisms of Artin-Schreier coverings of P 1 of degree 2. 

(4.2) Corollary. Let n > 1. The intersection of the supersingular locus with the hy- 
perelliptic locus in the moduli space M.2 n ® F 2 of curves of genus g = 2 n has dimension 
> n. 

Furthermore, consider two n-dimensional F2-subspaces L and L' of polynomials R = 
Y^=i a-iX 2 ' G ¥[x] with ai 7^ if R 7^ 0. Let C = xL and CJ = xL' and set C = C c and 
C' = C c> '. We then have: 

(4.3) Lemma. Tie curves C and C" are isomorphic as Galois covers of type (Z/2Z) n of 
P 1 if and only if there exists a p G F* such that under x ^ px the space C is transformed 
into C! . 

Proof. If the curves C and C are isomorphic as Galois covers of P 1 then the corresponding 
quotient curves Cr and Cri of genus > (for i?6l) are isomorphic as covers of P 1 . By 
Lemma (4.1) and the subsequent remark this happens only if there is a p G F* such that 
the transformation x 1— > px transforms xR into xR' for G L. □ 

(4.4) Proposition. Let g > 2 be written as in (1). Then the supersingular locus in 
M 9 <S> F 2 has dimension > Yli=i( r i + 1)^ ~ 1> where -u^ = (s; + 1) - X]j=i( r i + !)• 

Proof. We consider curves of the form C c of genus g > 2 with £ = ®xLi as in the proof 
of Theorem (2.1). Let m = Xli=i( r i + 1)^. Then the m coefficients of the polynomials 
in a basis of C which is a union of the bases of the (r^ + l)-dimensional summands xLi in 
7£* . define an open subset Q of affine m-space A^ 1 . Take the (m — l)-dimensional quotient 
of Q under the action of F*. A given curve C of genus > 1 can be written only in finitely 
many ways as a Galois cover of P 1 since #Aut(C)(F) < 00. Then Lemma (4.3) implies 
that the natural morphism Q — > M. g (g>F 2 is quasi-finite (onto its image). This proves our 
result. □ 
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